{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f085c4fa-ecc8-5670-8594-c416f3b96856", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2", "type": "library", "group": "io.netty", "name": "netty-codec-xml", "version": "4.1.122.Final-tuxcare.2", "purl": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c143f47f-d306-5ee9-8da0-a1fbf273dab9", "id": "CVE-2025-55163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55163 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1f207123-51e4-59e2-92d8-307c63038b1d", "id": "CVE-2025-58056", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58056 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:565a104c-4d71-5248-b6a3-8f46ac73da0f", "id": "CVE-2025-58057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-58057 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c07431f3-fcd4-5dfd-a262-d478d6d0070a", "id": "CVE-2025-59419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-59419 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:460fc80e-7d27-51c2-a194-2542ecb3e6d1", "id": "CVE-2025-67735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-67735 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:aa1c537d-62c6-5154-a296-16b5191bac05", "id": "CVE-2026-33870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6de5b243-ff52-5db0-ac38-aafbfe5aac1c", "id": "CVE-2026-33871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e5ce4073-35d4-517e-adc8-12d4439a8b6b", "id": "CVE-2026-41417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:17ef78e0-b5a8-580a-b8ff-290458709641", "id": "CVE-2026-42577", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-42577 does not affect version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml. CVE-2026-42577 affects Netty 4.2.x only (advisory range >= 4.2.0.Final, < 4.2.13.Final). An fd left registered with an epoll event mask of 0 is woken forever by the unmaskable EPOLLERR/EPOLLHUP after a RST on a half-closed connection. Target 4.1.122.Final is NOT affected due to architectural differences. The patch modifies EpollIoHandler.java and EpollIoOps.java, part of 4.2's IoHandler/IoOps abstraction. Neither file exists in 4.1.x, which registers via EpollEventLoop.modify() off AbstractEpollChannel.flags. That field is seeded Native.EPOLLET, and no read/close/half-close path clears it (only the explicit pre-registration setEpollMode(LEVEL_TRIGGERED) opt-in), so the registration stays edge-triggered and the RST is reported once per edge instead of on every epoll_wait. The chain from INPUT (connection state change) to GOAL (CPU busy-loop via empty event mask) is broken at step (ii): the target cannot produce an empty event mask. Verdict: not_affected. Justification: code_not_reachable (Rule 5 Type A2)." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e48e6106-fba4-5801-ab2b-436ee968a17f", "id": "CVE-2026-42578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b9787098-d86a-5e27-a927-78f9e18f95a3", "id": "CVE-2026-42579", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5e8aa71a-c927-5e42-966a-a8a889126de2", "id": "CVE-2026-42580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e61475b8-7413-5f2d-a443-0dbfa2304464", "id": "CVE-2026-42581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3aed80d2-07a4-527a-88d2-31731ea22879", "id": "CVE-2026-42583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7e5e9a1e-70d9-5f67-bc40-4309341ac58b", "id": "CVE-2026-42584", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42584 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:386d5c09-2e38-5085-990f-4265d7fabbd2", "id": "CVE-2026-42585", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42585 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1add5f02-644d-5b4a-8901-8a3edb4b1c18", "id": "CVE-2026-42586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c549935c-86b8-581f-80f4-195af71f787c", "id": "CVE-2026-42587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:11aa5757-7fe6-50e7-9ca0-6ccf29569205", "id": "CVE-2026-44248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b1ae371f-0127-5a7c-8310-28899d5e35a9", "id": "CVE-2026-44249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4e0615d8-0ce8-57db-b77e-6a7f22643493", "id": "CVE-2026-44250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44250 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:80163440-5b01-5246-8d62-9e4320396991", "id": "CVE-2026-44890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ec0f1162-fa63-57da-94fc-265ee9ca2077", "id": "CVE-2026-44891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:514d8cfb-909c-56c6-a57b-c2ebcffd4d79", "id": "CVE-2026-44893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cb670c0e-8363-5d1c-a0be-6ab005824126", "id": "CVE-2026-45416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:133c3473-6088-5d25-b3ff-4ab0af93fa8f", "id": "CVE-2026-45536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:00f4cc3b-f810-5e1d-960b-c9ff86a2faa2", "id": "CVE-2026-45673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:95a12207-1599-53c0-a6d6-54aae803cd49", "id": "CVE-2026-45674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:297931a5-fe63-52dc-84c5-284ee741b166", "id": "CVE-2026-46340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fd66c6c8-b8c4-57d5-9387-d6839acaf855", "id": "CVE-2026-47244", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:efb4dcf4-a546-56a9-9896-18a681b7de06", "id": "CVE-2026-47691", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:07a0a510-9e4e-55c1-8807-7b434246d7b1", "id": "CVE-2026-48006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8a52ef06-fd01-5b9a-ad77-52f0d95b6681", "id": "CVE-2026-48043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e7562901-a365-5d90-a1d8-e49d853679f7", "id": "CVE-2026-48059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:57ce11f4-2a03-51a9-8ce6-196bb9f71052", "id": "CVE-2026-50010", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b8336c6b-f683-544f-a823-02917a912fdc", "id": "CVE-2026-50011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50011 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d87cd600-502e-5256-8ec6-969f1aa93874", "id": "CVE-2026-50020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8b86894f-d4b7-5bb0-9912-b2b271c9df50", "id": "CVE-2026-50560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:39da938a-b3b1-566e-8321-c48093054253", "id": "CVE-2026-55831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:51987b2b-3f2a-5331-ac37-e12b75cfc6f5", "id": "CVE-2026-55833", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6464dd2c-0514-50ed-a881-8fe1577ae7e1", "id": "CVE-2026-55851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cfb72599-3823-5924-beb4-13769ef3f4cb", "id": "CVE-2026-56745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cb593b9b-f51f-57d3-ab78-13669180f367", "id": "CVE-2026-56746", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:325a0dea-42b4-52cf-a318-c76a9029d7df", "id": "CVE-2026-56817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:59f78f64-6abe-5b45-bae0-0721021bb1e4", "id": "CVE-2026-56818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:33d75df8-ab0a-5e4f-9b05-ea898e963330", "id": "CVE-2026-56819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:55e40f9a-f369-593c-8fdd-a56f24a43693", "id": "CVE-2026-56820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:1c29e294-0897-5114-a393-a362609dc622", "id": "CVE-2026-56821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8d9678cc-2cb8-5777-ae09-fb4741949103", "id": "CVE-2026-56822", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cb2b2945-39f4-536a-a873-64f1aa984bbf", "id": "CVE-2026-59898", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:14b4ee96-bfcc-5a21-b445-b8a679b2165e", "id": "CVE-2026-59899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bddc9471-6298-59d1-9855-21489bb4e582", "id": "CVE-2026-59900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e433e29d-1ad0-5716-af00-da1c6aff203f", "id": "CVE-2026-59901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:84225033-6da3-5be2-a3d4-5046ff74cadd", "id": "CVE-2026-59902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59902 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:127bda52-c0be-5b27-b0f3-ad7ac887ceb1", "id": "CVE-2026-59903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59903 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c1e6b7b7-3758-54e8-af6f-94bae7ef9bce", "id": "CVE-2026-59919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:efe5963b-3c6f-5101-b7ba-77fc7a0660cc", "id": "CVE-2026-59920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:48192270-12c3-56e6-91a1-f3f942d25e5a", "id": "CVE-2026-59921", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4bd68a68-c925-5486-a86b-438935b5d5a7", "id": "CVE-2026-73507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:012594dc-375c-58dd-8eb9-47916e1f33da", "id": "CVE-2026-73508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5d1ca3a5-76c8-5e0d-aa1c-b8e55c40b856", "id": "GHSA-mfg7-5gfp-c4w3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e4baf7fe-8538-5600-b55b-a07df53f9837", "id": "GHSA-v74w-7mr3-4qg3", "analysis": { "state": "exploitable", "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.122.Final-tuxcare.2 of io.netty:netty-codec-xml." }, "affects": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/io.netty/netty-codec-xml@4.1.122.Final-tuxcare.2" } ] }